<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Exchange 2007 Transport Edge server in SMTP Relay mode</title>
	<atom:link href="http://www.chris-mohan.com/2008/02/exchange-2007-transport-edge-server-in-smtp-relay-mode/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.chris-mohan.com/2008/02/exchange-2007-transport-edge-server-in-smtp-relay-mode/</link>
	<description>Securing Windows networks or giving it a go in Australia...</description>
	<lastBuildDate>Tue, 27 Dec 2011 21:36:24 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Chris Mohan</title>
		<link>http://www.chris-mohan.com/2008/02/exchange-2007-transport-edge-server-in-smtp-relay-mode/comment-page-1/#comment-137</link>
		<dc:creator>Chris Mohan</dc:creator>
		<pubDate>Sat, 17 Oct 2009 08:27:54 +0000</pubDate>
		<guid isPermaLink="false">http://www.chris-mohan.com/?p=20#comment-137</guid>
		<description>Hello John,

I&#039;ve cleaned up the post to make the fix section clearer and changed the name of the send receiver to avoid confusion. 

Hopefully.

Without knowing your environment, I only can offer general advice :-) 
For the Unix machines, you can add their IP addresses in as allowed to relay to the internal Exchange Hub server. This isn&#039;t great but works. See here for details:
http://msexchangeteam.com/archive/2006/12/28/432013.aspx

If you have the money, you may want to look at Windows 2008 Federation Services http://technet.microsoft.com/en-us/library/dd391937(WS.10).aspx that would then allow Unix user to authenticate to AD and get rid of the ugly IP address work around.</description>
		<content:encoded><![CDATA[<p>Hello John,</p>
<p>I&#8217;ve cleaned up the post to make the fix section clearer and changed the name of the send receiver to avoid confusion. </p>
<p>Hopefully.</p>
<p>Without knowing your environment, I only can offer general advice <img src='http://www.chris-mohan.com/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /><br />
For the Unix machines, you can add their IP addresses in as allowed to relay to the internal Exchange Hub server. This isn&#8217;t great but works. See here for details:<br />
<a href="http://msexchangeteam.com/archive/2006/12/28/432013.aspx" rel="nofollow">http://msexchangeteam.com/archive/2006/12/28/432013.aspx</a></p>
<p>If you have the money, you may want to look at Windows 2008 Federation Services <a href="http://technet.microsoft.com/en-us/library/dd391937(WS.10).aspx" rel="nofollow">http://technet.microsoft.com/en-us/library/dd391937(WS.10).aspx</a> that would then allow Unix user to authenticate to AD and get rid of the ugly IP address work around.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: johnh</title>
		<link>http://www.chris-mohan.com/2008/02/exchange-2007-transport-edge-server-in-smtp-relay-mode/comment-page-1/#comment-136</link>
		<dc:creator>johnh</dc:creator>
		<pubDate>Sat, 17 Oct 2009 05:46:16 +0000</pubDate>
		<guid isPermaLink="false">http://www.chris-mohan.com/?p=20#comment-136</guid>
		<description>Perhaps you could clarify last statement about the &quot;further leap&quot;.  You stated that on the &quot;Outbound to LAN receive connector clicked on the Exchange server in permission groups and Externally secured IN authentication&quot;.  There are two things I don&#039;t understand here:
1. &quot;in authentication&quot;  What does this mean?
and,
2. You described &quot;Outbound to LAN&quot; as a send connector under &quot;2 Send Connectors&quot;, but reference it as a receive connector in the last statement.
I&#039;m rather annoyed with Exchange 2007 because I can&#039;t allow our unix users to authenticate SMTP for relay.  So what it looks like is I have to open up an open relay.  Is there anyway (without putting our hub transport on the DMZ) to allow SMTP relay for authenticated users within our organization?  I don&#039;t know how much directory information ADAM holds or if it would be a viable source for authentication because there&#039;s little to no information on how to setup Exchange as a valid relay for authenticated senders.

Thanks for any help you can offer.</description>
		<content:encoded><![CDATA[<p>Perhaps you could clarify last statement about the &#8220;further leap&#8221;.  You stated that on the &#8220;Outbound to LAN receive connector clicked on the Exchange server in permission groups and Externally secured IN authentication&#8221;.  There are two things I don&#8217;t understand here:<br />
1. &#8220;in authentication&#8221;  What does this mean?<br />
and,<br />
2. You described &#8220;Outbound to LAN&#8221; as a send connector under &#8220;2 Send Connectors&#8221;, but reference it as a receive connector in the last statement.<br />
I&#8217;m rather annoyed with Exchange 2007 because I can&#8217;t allow our unix users to authenticate SMTP for relay.  So what it looks like is I have to open up an open relay.  Is there anyway (without putting our hub transport on the DMZ) to allow SMTP relay for authenticated users within our organization?  I don&#8217;t know how much directory information ADAM holds or if it would be a viable source for authentication because there&#8217;s little to no information on how to setup Exchange as a valid relay for authenticated senders.</p>
<p>Thanks for any help you can offer.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Gyorgy Kaposvari</title>
		<link>http://www.chris-mohan.com/2008/02/exchange-2007-transport-edge-server-in-smtp-relay-mode/comment-page-1/#comment-11</link>
		<dc:creator>Gyorgy Kaposvari</dc:creator>
		<pubDate>Mon, 14 Apr 2008 09:10:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.chris-mohan.com/?p=20#comment-11</guid>
		<description>I&#039;m glad to found this page, it contains the solution of my problem.
Thanks</description>
		<content:encoded><![CDATA[<p>I&#8217;m glad to found this page, it contains the solution of my problem.<br />
Thanks</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: My Domains &#187; Blog Archive &#187; Exchange 2007 Transport Edge server in SMTP Relay mode</title>
		<link>http://www.chris-mohan.com/2008/02/exchange-2007-transport-edge-server-in-smtp-relay-mode/comment-page-1/#comment-3</link>
		<dc:creator>My Domains &#187; Blog Archive &#187; Exchange 2007 Transport Edge server in SMTP Relay mode</dc:creator>
		<pubDate>Mon, 25 Feb 2008 14:35:56 +0000</pubDate>
		<guid isPermaLink="false">http://www.chris-mohan.com/?p=20#comment-3</guid>
		<description>[...] Original post by Security for a day [...]</description>
		<content:encoded><![CDATA[<p>[...] Original post by Security for a day [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>

